Map compliance controls and manage risk on your own server.
Free Community edition · Unlimited users · Self-hosting required

Business & marketing
Maintain risks, controls and compliance requirements on your own server.
Maintain risks, controls and compliance requirements on your own server.
Enterprise-grade open-source governance, risk, and compliance (GRC) software with policy libraries, security controls, and audit project tracking replacing proprietary automated compliance vendors.
Own hosting and maintenance required; official minimum one vCPU and 4 GB RAM plus swap. Outbound support-endpoint connectivity required. Awareness, account reviews, online assessments and enterprise automation are paid. Precise current source licence not established; no open-source badge proposed.
Each comparison covers the workflow described above, rather than every paid feature.